D337 Internet of Things (IoT) and Infrastructure - Set 4 - Part 2

Correct Answer: Default passwords

Mirai malware exploits devices that have not had their default passwords changed, making them vulnerable.

Correct Answer: To filter traffic between networks based on security rules

A firewall inspects traffic passing between networks and permits or blocks it according to configured security rules, forming a boundary control between trusted and untrusted zones.

Correct Answer: Dividing a network into zones to contain breaches and isolate devices

Segmentation separates IoT devices onto isolated network zones so that a compromised device cannot easily reach critical systems, limiting the blast radius of an attack.

Correct Answer: Logical separation of devices into distinct broadcast domains

A virtual LAN logically groups devices into separate broadcast domains regardless of physical location, enabling segmentation and traffic isolation without additional hardware.

Correct Answer: Automatically assigning IP addresses to devices

The Dynamic Host Configuration Protocol automatically assigns IP addresses and network configuration to devices, eliminating manual setup as devices join the network.

Correct Answer: Translates domain names into IP addresses

The Domain Name System resolves human-readable domain names into the numeric IP addresses that devices use to locate and communicate with each other.

Correct Answer: Creating an encrypted tunnel for secure communication over untrusted networks

A virtual private network creates an encrypted tunnel across an untrusted network such as the internet, protecting data in transit and allowing secure remote access.

Correct Answer: Infrastructure as a Service (IaaS)

IaaS provides virtualized infrastructure such as compute, storage, and networking, giving the customer control over operating systems and applications while the provider manages hardware.

Correct Answer: Using and configuring the application and managing their data

In SaaS the provider manages infrastructure, platform, and application. The customer configures the application, manages users, and remains responsible for their own data and access control.

Correct Answer: Running multiple virtual machines on a single physical host

Virtualization uses a hypervisor to run multiple isolated virtual machines on one physical server, improving hardware utilization, flexibility, and workload isolation.

Correct Answer: Software that creates and manages virtual machines

A hypervisor allocates physical resources among virtual machines and keeps them isolated. Type 1 runs directly on hardware, while Type 2 runs on a host operating system.

Correct Answer: They share the host OS kernel, making them lighter and faster to start

Containers package an application and its dependencies but share the host operating system kernel, so they are far smaller and start faster than virtual machines.

Correct Answer: Distributing traffic across multiple servers to improve availability and performance

A load balancer distributes incoming requests across multiple servers, preventing any single server from becoming a bottleneck and providing redundancy if one server fails.

Correct Answer: Systems remain operational with minimal downtime through redundancy

High availability designs eliminate single points of failure through redundancy and automatic failover so services continue operating despite component failures.

Correct Answer: The maximum acceptable amount of data loss measured in time

RPO defines how much data an organization can afford to lose, expressed as a time span, which determines how frequently backups or replication must occur.

Correct Answer: The target duration to restore service after an outage

RTO is the maximum acceptable time to restore a system or service after a disruption, driving decisions about failover architecture and recovery procedures.

Correct Answer: It enables recovery of collected data after failure, corruption, or attack

Backups allow recovery of critical collected data after hardware failure, corruption, accidental deletion, or ransomware, protecting the value derived from IoT deployments.

Correct Answer: Granting users and devices only the access needed to perform their function

Least privilege restricts each user, process, or device to the minimum access required, limiting the potential damage from compromised credentials or malfunctioning components.

Correct Answer: Requiring two or more independent forms of verification to authenticate

Multi-factor authentication requires evidence from multiple categories, such as something you know, have, or are, substantially reducing the risk from stolen passwords alone.

Correct Answer: Overwhelming a target with traffic from many compromised sources

A DDoS attack floods a target with traffic from many distributed sources, exhausting bandwidth or resources so legitimate users cannot access the service.